CVE-2026-64598 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64598 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64553 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64553 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64552 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64552 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64444 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64444 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64599 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64599 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64548 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64548 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64600 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64600 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-26081 affecting package haproxy for versions less than 2.9.11-8

CVE-2026-26081 affecting package haproxy for versions less than 2.9.11-8. A patched version of the package is available...

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27. A patched version of the package is available...

CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4

CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...

CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4

CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...

CVE-2026-64298 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64298 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2. A patched version of the package is available...

CVE-2026-56289 affecting package patch for versions less than 2.7.6-10

CVE-2026-56289 affecting package patch for versions less than 2.7.6-10. A patched version of the package is available...

CVE-2026-68444 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68444 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-47718

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. When secureEnabled=true, FUXA 1.3.0-2773 still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue...

CVE-2026-47717 FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue...

EUVD-2026-57598

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...

CVE-2026-73491

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: URIs whose scheme is split or prefixed with the HTML5 named whitespace character...